dasel-hardened-container

dasel v3.3.1 강화 컨테이너 이것은 CVE-2026-33320 무제한 YAML 별칭 확장에 대한 빌드 시 패치가 적용된 dasel v3.3.1용 melange 패키지 및 apko 컨테이너 이미지입니다. 이미지는 로컬에서 생성된 APK로 완전히 빌드되며, 사전 빌드된 업스트림 이미지를 사용하지 않습니다. 전제 조건 도구| 테스트된 버전| 목적 ---|---|--- Docker| 29.3.1| 컨테이너 런타임, compose.yaml을 통해 melange/apko 실행 melange| 0.50.5 Docker 이미지...

dasel-melange-apko

dasel v3.3.1 — Melange + apko ビルド、CVE-2026-33320 パッチ適用版 このリポジトリは、dasel CLI（v3.3.1）を Melange で APK としてパッケージ化し、apko で最小限のコンテナイメージを構築し、CVE-2026-33320 の修正を v3.3.1 コードベースに適用したものです（バージョンアップではなくパッチ適用）。 結果として得られるのは、静的 dasel バイナリのみを含む約 4 MB のイメージで、シェルもパッケージマネージャも libc も含まず、非 root ユーザーで実行されます。 リポジトリ構成...

Linux Distros Unpatched Vulnerability : CVE-2026-33320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel'...

CVE-2026-33320

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the...

CVE-2026-33320 vulnerabilities

Vulnerabilities for packages: vale...

CVE-2026-33320

creationtimestamp| type| source ---|---|--- 2026-03-18 19:16:52+00:00| published-proof-of-concept| https://github.com/TomWright/dasel/security/advisories/GHSA-4fcp-jxh7-23x8 2026-05-04 21:00:04+00:00| seen| Telegram/rPnY3cDOMvKcPFRcx6QsxUGiZwWHKwUb91xptawBtUQTSW0 2026-06-01 21:00:04+00:00| seen|...